This article is specifically for users accessing Enthuse on a Mac OS device.
Why device passkeys might be blocked
Some organisations don’t have Touch ID turned on for staff devices. When it’s disabled, MacOS can prevent the browser from using the built-in security feature that creates and uses device passkeys.
If Touch ID isn’t available, users can still sign in using:
Mobile passkeys (on a phone)
Magic links & MFA(sent by email)
But enabling Touch ID gives users the smoothest and most secure sign in experience. It’s faster than entering a password or using MFA, and provides the most seamless and secure experience for Enthuse’s users.
Why allowing passkeys is worth it
Passkeys are the “gold standard” because they stop phishing
Passwords can be:
stolen in a data breach
reused across sites
guessed or cracked
tricked out of users, such as an email phishing scam
Passkeys work differently. Users don’t type a password. Instead, the device proves it’s really the user using strong built-in security or biometrics.
Passkeys are also faster and easier to use. Signing in is just a quick face/ fingerprint/ PIN check; no typing long passwords, no resetting forgotten passwords, and fewer login interruptions.
Note: Passkeys are tied to the real website. Even if someone builds a convincing fake login page, a passkey won’t work on the wrong site. That’s a big reason passkeys are seen as the modern, phishing-resistant standard.
Passkeys are safe because the “secret” doesn’t leave the device
With a device passkey:
The sensitive part stays on the user’s device
The service (Enthuse Identity) stores only what it needs to verify sign-in
There’s no password stored that can be copied and reused elsewhere
Will this interfere with other SSO/MFA tools?
No. Enabling Touch ID so staff can use device passkeys for Enthuse does not turn off or weaken your existing controls.
Touch ID is a local sign-in method that unlocks secure keys on the device. It:
doesn’t disable your identity provider
doesn’t remove MFA requirements you already enforce
doesn’t change Conditional Access / device compliance policies
It simply allows the device to act as a secure authenticator when a user chooses to use a passkey. You’re adding a safer option for your organisation, not replacing your current security setup.
Check if you are able to enable Touch ID
Sometimes you'll be able to enable Touch ID without asking your IT teams.
To check, Follow these steps to set up Touch ID.
1. Select Settings on your Apple device and select Touch ID & Password > Enable & setup a Touch ID.
If this option is unavailable, you'll need to speak with your internal IT Team to unlock Touch ID.